Mitigate Data Poisoning Attack by Partially Federated Learning
(2023) ARES 2023: The 18th International Conference on Availability, Reliability and Security — Location: Benevento Italy
Files
MitigateDataPoisoningAttackbyPartiallyFederatedLearning.pdf
Closed Access - Adobe PDF
- 733.94 KB
Details
- Authors
Dam, Khanh Huu The 
Legay, Axel
- Abstract
- An efficient machine learning model for malware detection requires a large dataset to train. Yet it is not easy to collect such a large dataset without violating or leaving vulnerable to potential violation various aspects of data privacy. Our work proposes a federated learning framework that permits multiple parties to collaborate on learning behavioral graphs for malware detection. Our proposed graph classification framework allows the participating parties to freely decide their preferred classifier model without acknowledging their preferences to the others involved. This mitigates the chance of any data poisoning attacks. In our experiments, our classification model using the partially federated learning achieved the F1-score of 0.97, close to the performance of the centralized data training models. Moreover, the impact of the label flipping attack against our model is less than 0.02.
- Affiliations
Citations
Dam, K. H. T., & Legay, A. (2023). Mitigate Data Poisoning Attack by Partially Federated Learning. ARES 2023: The 18th International Conference on Availability, Reliability and Security, Benevento Italy. https://hdl.handle.net/2078.5/164340